General

  • Target

    1752-55-0x0000000002160000-0x00000000021A4000-memory.dmp

  • Size

    272KB

  • Sample

    221219-1zcd2sgb99

  • MD5

    aafb254f42f8eeebeaa459a511416af7

  • SHA1

    39bf4d7785cdf8b77b5b837113c43e28421cb1fc

  • SHA256

    66020f140bb649e2ecb257ad80205b4927fe804df1b9771d7b4190e81709544f

  • SHA512

    0f171f10a2d7e9302b291c43b27c83bfaac304c28d7079277e53be5c9b9b8f886c5d5250ba21a8a4e50294cd5233d1d93978ee3b42ebe18f7c911b9e0e6552db

  • SSDEEP

    3072:v6jIELh610pC8pGLIqQdhPJLv1HZGqYibo40yOrs7hpCniTGnCzHxNn2pU9f2MKS:v6j26WrQdhhLt5GqY147hYniSnC

Malware Config

Extracted

Family

redline

Botnet

nokia

C2

31.41.244.198:4083

Attributes
  • auth_value

    3b38e056d594ae0cf1368e6e1daa3a4e

Targets

    • Target

      1752-55-0x0000000002160000-0x00000000021A4000-memory.dmp

    • Size

      272KB

    • MD5

      aafb254f42f8eeebeaa459a511416af7

    • SHA1

      39bf4d7785cdf8b77b5b837113c43e28421cb1fc

    • SHA256

      66020f140bb649e2ecb257ad80205b4927fe804df1b9771d7b4190e81709544f

    • SHA512

      0f171f10a2d7e9302b291c43b27c83bfaac304c28d7079277e53be5c9b9b8f886c5d5250ba21a8a4e50294cd5233d1d93978ee3b42ebe18f7c911b9e0e6552db

    • SSDEEP

      3072:v6jIELh610pC8pGLIqQdhPJLv1HZGqYibo40yOrs7hpCniTGnCzHxNn2pU9f2MKS:v6j26WrQdhhLt5GqY147hYniSnC

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks